Extracting domain from email address

InsightConnect Workflows
1

Trying to extract domain from an email address to use in checks with VirusTotal and ThreatCrowd.
I’m guessing the best way is to use a pattern match in the workflow, but I’m just not quite figuring out the pattern to extract the domain and set a domain variable in the output.

2

I got some help from support and figured this out.

When input is an email address, this pattern extracts the domain and outputs as domain variable.

@{{domain:/\S+.*/}}

Also got help from this Developing and Debugging Regex for the Pattern Match Step

1 Like